Security Architect, Product Architecture

Overview

The Security Architect is a key member of Brightstar Lottery’s Product Architecture team, responsible for embedding security principles into products from initial design through release and customer integration. This role provides hands-on security leadership across application, infrastructure, and cloud architecture while ensuring alignment with organizational standards, industry frameworks, and regulatory requirements. The Security Architect also supports customer-specific technology decisions, complex integrations, and the resolution of critical security challenges. This is a real hands-on role, with a strong emphasis on AWS experience.

This hybrid position is based in West Greenwich, Rhode Island. We are seeking candidates who reside within a reasonable commuting distance and can regularly collaborate in person with colleagues and business partners while maintaining the flexibility of a hybrid work environment.

What You'll Do

•    Define, implement and maintain security architecture standards for cloud-native, hybrid, and on-premises product solutions.
•    Conduct security architecture reviews early in the development lifecycle to identify risks. Implement your recommended controls to strengthen the solution.
•    Perform threat modelling for new products and features and translate identified vulnerabilities into actionable implementation changes. You will close this loop hands-on.
•    Ensure product designs align with recognized security frameworks and standards, including the OWASP Top 10 and NIST Cybersecurity Framework.
•    Support compliance with applicable regulatory and certification requirements, including GDPR, FedRAMP, and ISO 27001.
•    Establish architectural guardrails for identity and access management, encryption, secure coding, and related security practices. Where there is a need, you will implement these.
•    Partner with Product Architecture, Engineering, DevOps, and Product Management teams to integrate security throughout product development.
•    Guide the integration of automated security testing and monitoring into CI/CD pipelines.
•    Provide expertise in secure API design, container security, cloud security posture management, and microservices architecture.
•    Evaluate and guide the adoption of security technologies and architectural patterns, including Zero Trust, federated identity, and policy enforcement approaches.
•    Develop security architecture documentation, technical papers, engineering guidelines, and decision records.
•    Explain architectural trade-offs involving cost, complexity, performance, security, and maintainability to technical and business stakeholders.
•    Provide hands-on support when needed to establish security foundations or resolve critical engineering and customer issues.
•    Define security solutions and architectural decisions for customer deployments in partnership with system architects and customer technical teams.
•    Collaborate effectively across teams, stakeholder groups, and time zones, with travel of up to 15% as needed.

Strategic Impact

This role owns the security architecture and implementation direction across Brightstar Lottery’s products and supporting systems. You will help the organization remain ahead of evolving threats by influencing the security roadmap, establishing reusable architectural standards, and ensuring that security is incorporated into product and solution decisions from the beginning. You will help us close the loops you identify.

Through partnership with Product Management, Engineering, DevOps, Product Architecture, and customer-facing technical teams, you will help scale consistent security practices across the product portfolio. Your work will strengthen product resilience, support compliance, enable secure modernization, and provide customers with confidence in Brightstar Lottery’s technology solutions.

What We're Looking For

Required Qualifications
•    Hands on AWS experience a must. Azure in addition is preferable.
•    Bachelor’s or master’s degree in computer science, information security, or a related field.
•    At least eight years of experience in security architecture, preferably within a product development environment.
•    Demonstrated experience designing and guiding security solutions across cloud, hybrid, and on-premises environments.
•    Experience with container security and microservices architecture.
•    Strong knowledge of cryptography, identity and access management, public key infrastructure, and secure API design.
•    Familiarity with security information and event management, vulnerability management, automated security testing, and security monitoring tools.
•    Knowledge of recognized security and compliance frameworks, including OWASP, NIST, GDPR, FedRAMP, or ISO 27001.
•    Strong understanding of architectural and system design principles, with the ability to evaluate trade-offs involving cost, complexity, performance, and maintainability.
•    Strong knowledge of Java and commonly used technologies such as Spring, JPA or Hibernate, RESTful APIs, Maven or Gradle, and unit and integration testing frameworks.
•    Understanding of product management practices, agile software development, and modern product design processes.
•    Conceptual familiarity with frontend technologies such as HTML, JavaScript, React, or Angular.
•    Strong written and verbal communication skills, including the ability to facilitate technical and strategic discussions, navigate differing viewpoints, and build stakeholder alignment.
•    A hands-on approach and willingness to work directly with engineering teams to establish technical foundations and resolve critical issues.
•    Ability to collaborate across multiple time zones when required.
•    Ability to travel up to 15%. 
 
Preferred Qualifications
•    CISSP, CCSP, AWS Security Specialty, Azure security certification, or a comparable security credential.
•    Experience with Infrastructure as Code tools such as Terraform, ARM, Bicep, or CloudFormation.
•    Experience with DevOps platforms and CI/CD technologies such as Azure DevOps, Jenkins, or GitHub Actions.
•    Familiarity with containerization and orchestration technologies, including Kubernetes.

Why Join Brightstar Lottery?

Success Profile

• Leading Complexity
• Leading People
• Leading the Business
• Leading Self

#LI-HYBRID #LI-BK1